Android and AnyConnect "from scratch"

[Steve Rodrigue]

I'm trying to find where to start to test VPN connections with AnyConnect for Android.

I have access to an ASA and misc. routers. For testing I have both a Nexus S (Samsung smartphone) and a Transformer Prime (tablet from Asus). I can't find any clear documentation on where/how to start my Router/ASA configuration. Both devices are rooted, running under Android 4.0.3 and have Rooted AnyConnect installed.

I would appreciate some tips from you guys and eventually I would gather all the information to build a decent/reusable documentation to work with. Thanks in advance!

[Marcin Latosiewicz]

Steve,

Two notes.

No go for IOS + anyconnect on mobile platforms:

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtx24822

Some people have got it working, but it's not considered supported.

For ASA:

- make sure you have :anyconnect mobile: license

- check release notes if features you're looking for are supported

- configure like any other client.

M.

[Steve Rodrigue]

Some progression here... But...

Licensed features for this platform:
Maximum Physical Interfaces : 8 perpetual
VLANs : 3 DMZ Restricted
Dual ISPs : Disabled perpetual
VLAN Trunk Ports : 0 perpetual
Inside Hosts : 10 perpetual
Failover : Disabled perpetual
VPN-DES : Enabled perpetual
VPN-3DES-AES : Enabled perpetual
AnyConnect Premium Peers : 2 perpetual
AnyConnect Essentials : Disabled perpetual
Other VPN Peers : 10 perpetual
Total VPN Peers : 12 perpetual
Shared License : Disabled perpetual
AnyConnect for Mobile : Disabled perpetual
AnyConnect for Cisco VPN Phone : Disabled perpetual
Advanced Endpoint Assessment : Disabled perpetual
UC Phone Proxy Sessions : 2 perpetual
Total UC Proxy Sessions : 2 perpetual
Botnet Traffic Filter : Disabled perpetual
Intercompany Media Engine : Disabled perpetual
This platform has a Base license.

Do I need to "buy" a license to test AnyConnect for Mobile? There is a way to have a small license (1-2 user(s)) for testing. Any tips will be appreciated.

[Marvin Rhoads]

Yes, AnyConnect for Mobile is separately licensed and you must also have AnyConnect Essentials as a prerequisite (and be on ASA 8.0(4) or later). Both are nominally priced (list prices US$100 to US$500 based on ASA model) and are permanent licenses for unlimited clients.

SKUs for ordering are here.

[Steve Rodrigue]

Thanks! It seems I have to spend some money to build my lab.